diff --git a/server_admin/topics.adoc b/server_admin/topics.adoc index 3cb129cdaf..f2c3052ed5 100644 --- a/server_admin/topics.adoc +++ b/server_admin/topics.adoc @@ -1,31 +1,26 @@ -include::topics/overview.adoc[] +1include::topics/overview.adoc[] include::topics/overview/features.adoc[] include::topics/overview/how.adoc[] include::topics/overview/concepts.adoc[] include::topics/initialization.adoc[] include::topics/admin-console.adoc[] -include::topics/realms/master.adoc[] -include::topics/realms/create.adoc[] -include::topics/realms/ssl.adoc[] -include::topics/realms/cache.adoc[] -include::topics/realms/email.adoc[] -include::topics/realms/themes.adoc[] -include::topics/users.adoc[] -include::topics/users/proc-searching-user.adoc[leveloffset=+2] -include::topics/users/proc-creating-user.adoc[leveloffset=+2] -include::topics/users/proc-deleting-user.adoc[leveloffset=+2] -include::topics/users/proc-configuring-user-attributes.adoc[leveloffset=+2] -include::topics/users/credentials.adoc[leveloffset=+2] -include::topics/users/con-required-actions.adoc[leveloffset=+2] -include::topics/users/impersonation.adoc[] -include::topics/users/user-registration.adoc[] -include::topics/users/recaptcha.adoc[] -include::topics/users/personal_data.adoc[] -include::topics/users/allow-user-to-delete-account.adoc[] -include::topics/users/user-profile.adoc[] -include::topics/login-settings.adoc[] -include::topics/login-settings/forgot-password.adoc[] -include::topics/login-settings/remember-me.adoc[] +include::topics/user-federation.adoc[] +include::topics/user-federation/ldap.adoc[] +include::topics/user-federation/sssd.adoc[] +include::topics/user-federation/custom.adoc[] +include::topics/assembly-managing-users.adoc[] +include::topics/sessions.adoc[] +include::topics/sessions/administering.adoc[] +include::topics/sessions/revocation.adoc[] +include::topics/sessions/timeouts.adoc[] +include::topics/sessions/offline.adoc[] + +ifeval::[{project_community}==true] +include::topics/sessions/preloading.adoc[] +endif::[] + +include::topics/sessions/transient.adoc[] +include::topics/assembly-roles-groups.adoc[] include::topics/authentication.adoc[] include::topics/authentication/password-policies.adoc[] include::topics/authentication/otp-policies.adoc[] @@ -34,39 +29,6 @@ include::topics/authentication/kerberos.adoc[] include::topics/authentication/x509.adoc[] include::topics/authentication/webauthn.adoc[] include::topics/authentication/conditions.adoc[] -include::topics/sso-protocols.adoc[] -include::topics/sso-protocols/oidc.adoc[] -include::topics/sso-protocols/saml.adoc[] -include::topics/sso-protocols/saml-vs-oidc.adoc[] -include::topics/sso-protocols/docker.adoc[] -include::topics/clients.adoc[] -include::topics/clients/client-oidc.adoc[] -include::topics/clients/oidc/con-confidential-client-credentials.adoc[] -include::topics/clients/oidc/proc-using-a-service-account.adoc[] -include::topics/clients/oidc/audience.adoc[] -include::topics/clients/saml/proc-creating-saml-client.adoc[] -include::topics/clients/saml/idp-initiated-login.adoc[] -include::topics/clients/saml/entity-descriptors.adoc[] -include::topics/clients/client-link.adoc[] -include::topics/clients/protocol-mappers.adoc[] -include::topics/clients/installation.adoc[] -include::topics/clients/client-scopes.adoc[] -include::topics/clients/client-policies.adoc[] -include::topics/roles.adoc[] -include::topics/roles/realm-roles.adoc[] -include::topics/roles/client-roles.adoc[] -include::topics/roles/composite.adoc[] -include::topics/roles/user-role-mappings.adoc[] -include::topics/roles/user-role-mappings/default-roles.adoc[] -include::topics/roles/role-scope-mappings.adoc[] -include::topics/groups.adoc[] -include::topics/groups/groups-vs-roles.adoc[] -include::topics/groups/default-groups.adoc[] -include::topics/admin-console-permissions.adoc[] -include::topics/admin-console-permissions/master-realm.adoc[] -include::topics/admin-console-permissions/per-realm.adoc[] -include::topics/admin-console-permissions/fine-grain.adoc[] -include::topics/realms/keys.adoc[] include::topics/identity-broker.adoc[] include::topics/identity-broker/overview.adoc[] include::topics/identity-broker/default-provider.adoc[] @@ -92,27 +54,17 @@ include::topics/identity-broker/session-data.adoc[] include::topics/identity-broker/first-login-flow.adoc[] include::topics/identity-broker/tokens.adoc[] include::topics/identity-broker/logout.adoc[] -include::topics/sessions.adoc[] -include::topics/sessions/administering.adoc[] -include::topics/sessions/revocation.adoc[] -include::topics/sessions/timeouts.adoc[] -include::topics/sessions/offline.adoc[] - -ifeval::[{project_community}==true] -include::topics/sessions/preloading.adoc[] -endif::[] - -include::topics/sessions/transient.adoc[] -include::topics/user-federation.adoc[] -include::topics/user-federation/ldap.adoc[] -include::topics/user-federation/sssd.adoc[] -include::topics/user-federation/custom.adoc[] +include::topics/sso-protocols.adoc[] +include::topics/admin-console-permissions.adoc[] +include::topics/admin-console-permissions/master-realm.adoc[] +include::topics/admin-console-permissions/per-realm.adoc[] +include::topics/admin-console-permissions/fine-grain.adoc[] +include::topics/assembly-managing-clients.adoc[] +include::topics/vault.adoc[] include::topics/events.adoc[] include::topics/events/login.adoc[] include::topics/events/admin.adoc[] include::topics/export-import.adoc[] -include::topics/vault.adoc[] -include::topics/account.adoc[] include::topics/threat.adoc[] include::topics/threat/host.adoc[] include::topics/threat/admin.adoc[] @@ -122,15 +74,14 @@ include::topics/threat/clickjacking.adoc[] include::topics/threat/ssl.adoc[] include::topics/threat/csrf.adoc[] include::topics/threat/redirect.adoc[] -include::topics/threat/fapi-compliance.adoc[] include::topics/threat/compromised-tokens.adoc[] include::topics/threat/compromised-codes.adoc[] include::topics/threat/open-redirect.adoc[] include::topics/threat/password-db-compromised.adoc[] include::topics/threat/scope.adoc[] include::topics/threat/audience-limit.adoc[] -include::topics/threat/auth-sessions-limit.adoc[] include::topics/threat/sql.adoc[] +include::topics/account.adoc[] include::topics/admin-cli.adoc[] //ifeval::[{project_community}==true] diff --git a/server_admin/topics/users.adoc b/server_admin/topics/users.adoc index 5e9b174602..6aa32ecab5 100644 --- a/server_admin/topics/users.adoc +++ b/server_admin/topics/users.adoc @@ -1,4 +1,16 @@ == User Management -This section describes the administration functions for managing users. \ No newline at end of file +This section describes the administration functions for managing users. + +include::users/proc-searching-user.adoc[leveloffset=2] +include::users/proc-creating-user.adoc[leveloffset=2] +include::users/proc-deleting-user.adoc[leveloffset=2] +include::users/proc-configuring-user-attributes.adoc[leveloffset=2] +include::users/credentials.adoc[leveloffset=2] +include::users/con-required-actions.adoc[leveloffset=2] +include::users/impersonation.adoc[leveloffset=2] +include::users/user-registration.adoc[leveloffset=2] +include::users/recaptcha.adoc[leveloffset=2] +include::users/personal_data.adoc[leveloffset=2] + diff --git a/server_admin/topics/users/con-required-actions.adoc b/server_admin/topics/users/con-required-actions.adoc index 79911d13e0..056dd28945 100644 --- a/server_admin/topics/users/con-required-actions.adoc +++ b/server_admin/topics/users/con-required-actions.adoc @@ -20,6 +20,6 @@ Update Profile:: The user must update profile information, such as name, address, email, and phone number. -include::proc-setting-required-actions.adoc[leveloffset=+3] -include::proc-setting-default-required-actions.adoc[leveloffset=+4] -include::proc-enabling-terms-conditions.adoc[leveloffset=+3] +include::proc-setting-required-actions.adoc[leveloffset=3] +include::proc-setting-default-required-actions.adoc[leveloffset=3] +include::proc-enabling-terms-conditions.adoc[leveloffset=3] diff --git a/server_admin/topics/users/credentials.adoc b/server_admin/topics/users/credentials.adoc index 702b17b731..a99b86c27a 100644 --- a/server_admin/topics/users/credentials.adoc +++ b/server_admin/topics/users/credentials.adoc @@ -1,5 +1,5 @@ [[_user-credentials]] -== User Credentials += User Credentials When viewing a user if you go to the `Credentials` tab you can manage a user's credentials. @@ -23,7 +23,7 @@ Data:: Actions:: This column has two buttons. `Save` records the value of the User Label, while `Delete` will remove the credential. -=== Creating a Password for the User +== Creating a Password for the User If a user doesn't have a password, or if the password has been deleted, the `Set Password` section will be shown on the page. @@ -43,13 +43,13 @@ The sent email contains a link that will bring the user to the update password s Note that a user can only have a single credential of type password. -=== Creating other credentials +== Creating other credentials You cannot configure other types of credentials for a specific user within the Admin Console. This is the responsibility of the user. You can only delete credentials for a user on the `Credentials` tab, for example if the user has lost an OTP device, or if a credential has been compromised. -=== Creating an OTP +== Creating an OTP If OTP is conditional in your realm, the user will have to go to the User Account Management service to re-configure a new OTP generator. If OTP is required, then the user will be asked to re-configure a new OTP generator when they log in. diff --git a/server_admin/topics/users/proc-enabling-terms-conditions.adoc b/server_admin/topics/users/proc-enabling-terms-conditions.adoc index 511b995295..67e2bebe99 100644 --- a/server_admin/topics/users/proc-enabling-terms-conditions.adoc +++ b/server_admin/topics/users/proc-enabling-terms-conditions.adoc @@ -1,5 +1,5 @@ [id="proc-enabling-terms-conditions_{context}"] -== Terms and conditions += Terms and conditions {project_name} requires new users to accept the terms and conditions before logging in for the first time. diff --git a/server_admin/topics/users/proc-setting-default-required-actions.adoc b/server_admin/topics/users/proc-setting-default-required-actions.adoc index fb024b8249..fa815dadc2 100644 --- a/server_admin/topics/users/proc-setting-default-required-actions.adoc +++ b/server_admin/topics/users/proc-setting-default-required-actions.adoc @@ -1,5 +1,5 @@ [id="proc-setting-default-required-actions_{context}"] -== Setting default required actions += Setting default required actions You can use the registration link or the *Required Actions* tab to specify the required actions that must be completed by a user before logging in. diff --git a/server_admin/topics/users/proc-setting-required-actions.adoc b/server_admin/topics/users/proc-setting-required-actions.adoc index 62e0bbd79e..2a096aa04f 100644 --- a/server_admin/topics/users/proc-setting-required-actions.adoc +++ b/server_admin/topics/users/proc-setting-required-actions.adoc @@ -1,5 +1,5 @@ [id="proc-setting-required-actions_{context}"] -== Setting required actions += Setting required actions You can add and remove the required actions for existing users in the admin console.